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Abstract 

In this paper we give an overview of the quantum computational complexity class QMA and a 
description of known QMA-complete problems to date Q Such problems are believed to be difficult to 
solve, even with a quantum computer, but have the property that if a purported solution to the problem 
is given, a quantum computer would easily be able to verify whether it is correct. An attempt has been 
made to make this paper as self-contained as possible so that it can be accessible to computer scientists, 
physicists, mathematicians, and quantum chemists. Problems of interest to all of these professions can 
be found here. 

1 Introduction 

1.1 Background 

The class QMA is the natural extension of the classical class NP to the quantum computing world. NP 
is an extremely important class in classical complexity theory, containing (by definition) those problems 
that have a short proof (or witness) that can be efficiently checked to verify that a valid solution to the 
problem exists. The class NP is of great importance because many interesting and important problems 
have this property - they may be difficult to solve, but given a solution, it is easy to verify that the 
solution is correct. 

The probabilistic extension of NP is the class MA, standing for " Merlin- Arthur" . Unlike in NP where 
witnesses must be verifiable with certainty, in MA valid witnesses need only be accepted with probability 
greater than 2/3 (and invalid witnesses rejected with probability greater than 2/3). MA can be thought 
of as the class of languages L for which a computationally-unbounded but untrustworthy prover, Merlin, 
can convince (with high probability) a verifier, Arthur (who is limited to polynomial-time computation), 
that a particular instance x is in L. Furthermore, when the instance x is not in L, the probability of 
Merlin successfully cheating must be low. 

Because quantum computers are probabilistic by nature (as the outcome of a quantum measurement 
can generally be predicted only probabilistically), the natural quantum analogue of NP is actually the 
quantum analogue of MA, whence the quantum class QMA - Quantum-Merlin-ArthuiQ QMA, then, 
is the class of languages for which small quantum witness states exist that enable one to prove, with 
high probability, whether a given string belongs to the language by whether the witness state causes an 
efficient quantum verifier circuit to output 1. It was first studied by Kitaev[2T)] and Knill[2T]. A more 
precise definition will be given later. 

The history of QMA takes its lead from the history of NP. In complexity theory, one of the most 
important results about NP was the first proof that it contains complete problems. A problem is NP-hard 
if, given the ability to solve it, one can also efficiently (that is, with only polynomial overhead) solve 
any other NP problem; in other words, a problem is NP-hard if any NP problem can be reduced to it. 
If, in addition to being NP-hard, a problem is itself in NP, it is called an NP-complete problem, and 
can be considered among the hardest of all the problems in NP. Two simple examples of NP-complete 
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problems are Boolean satisfiability (SAT) and circuit satisfiability (CSAT). The problem CSAT 
is to determine, given a boolean circuit, whether there exists an input that will be evaluated by the 
circuit as true. The problem SAT is to determine, given a set of clauses containing Boolean variables, 
whether there is an assignment of those variables that will satisfy all of the clauses. If the clauses are 
restricted to containing at most k literals each, the problem is called fe-SAT. One may also consider the 
problem MAX-SAT, which is to determine, given a set of clauses (of Boolean variables) and an integer 
m, whether at least m clauses can be simultaneously satisfied. 

The fact that a complete problem exists for NP is actually trivial, as the problem of deciding whether 
there exists a (small) input that will be accepted (in polynomial time) by a given Turing machine is 
trivially NP-complete; rather, the importance of NP-completeness is due to the existence of interesting 
NP-complete problems. The famous Cook-Levin theorem, which pioneered the study of NP-completeness, 
states that SAT is NP-complete. Its proof first shows that the above trivial NP-complete problem can 
be reduced to CSAT, and then shows that CSAT can be reduced to SAT. 

The quantum analogue of CSAT is the quantum circuit satisfiability problem (QCSAT), which 
is trivially QMA-complete (since QMA is defined in terms of quantum circuits). But QMA was found 
to have other, natural complete problems too. The most important of these, the fc-LOCAL Hamiltonian 
problem [2D] , was defined by Kitaev (20] inspired by Feynman's ideas on Hamiltonian quantum computing 
[11] . This problem is a quantum analogue of MAX-SAT, in which Boolean variables are replaced by qubits 
and clauses are replaced by local Hamiltonians (which may be viewed as local constraints on the qubits); 
it is defined formally below in |H-l| Just as the Cook-Levin theorem opened the study of NP-completeness 
by showing that CSAT (which was shown to be NP-complete) can be reduced to SAT, so too the study 
of QMA-completeness began by showing that QCSAT can be reduced to 5-local Hamiltonian. 

However, unlike NP, for which thousands of complete problems are known, there are currently rela- 
tively few known QMA-complete problems. In this paper we will survey many, if not all, of them. This 
paper divides the QMA-complete problems into three main groups and one subgroup: 

• Quantum circuit /channel property verification (V) 

• Hamiltonian ground state estimation (H) 

- Quantum fc-SAT (S) 

• Density matrix consistency (C) 

The letters in parentheses are used as labels to identify the group. 

1.2 Formal definition of QMA 

We now give a formal definition of QMA. 

Definition 1.1. QMA is the set of all languages L C {0,1}* for which there exists a (uniform family 
of) quantum polynomial-time verifier circuit V such that for every x £ {0, 1}*, 

if x £ L then there exists a witness state \tp x ) such that V(x, \i>x)) accepts with probability ^ 2/3 
if x ^ L then for every purported witness state \ip), V(x, |V>) ) accepts with probability ^1/3. 

Although the definition above used the numbers 2/3 and 1/3 (as is standard), we can generally define 
the class QMA(a,6): Given functions a, b : IN — > (0,1) with a(n) — b(n) ^ l/poly(n), a language is in 
QMA(o, b) if 2/3 and 1/3 in the definition above are replaced by a and b, respectively. It is important 
to note that doing this does not change the class: QMA(2/3, 1/3) = QMA(1 — e,e) provided that 
e ;> 2" poly(n) . Moreover, in going from QMA(2/3, 1/3) to QMA(1 — e, e), the amplification procedure can 
be carried out in such a way that the same witness is used, i.e. Merlin need only ever send a single copy 
of the witness state. [24] 

When a = 0, i.e. when the witness must be verifiable with no error, the class is called QMAi; thus 
QMAi = QMA(1, 1/3) = QMA(1, e). For the classical complexity class MA it is known that MA = MAi, 
but it is still an open question whether QMA=QMAi. Several QMAi-complete problems are presented 
in this paper. 

Furthermore, it should be noted that QMA actually consists of promise problems, meaning that when 
considering whether Merlin can truthfully convince Arthur or trick Arthur, we restrict our consideration 
to a subset of possible instances - we may assume that we are promised that our instance of consideration 
falls in this subset. With the above remarks, we can write the definition of QMA in a style matching 
that of the problem definitions provided in this paper. 
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Definition 1.2 (QMA). A promise problem L = L yes UL no C {0, 1}* is in QMA if there exists a quantum 
polynomial-time verifier circuit V such that for every x G {0, 1}*, 

(yes case) if x G L yes then Bpoly (\x\)-qubit state \tp x ) such that Pr |V(x, l^)^ ) accepts J > b 

(no case) if x G L no then Vpoly(|a^|) -qubit states \tp), Pr |V(x, \ip) ) accepts j ^ a 
promised that one of these is the case ( i. e. either x is in L yes or L no ), 

where b — a ^ l/poly(|:r|) and 0<e<a<6<l — e, with e ^ 2~ poly ' n - ) . //, instead, the above is true 
with 6=1, then L is in the class QMA\. 

Except for a glossary at the end, which provides the definitions of several basic reoccurring mathemati- 
cal terms that appear in this work, the remainder of this paper is devoted to listing known QMA-complete 
problems, along with their description and sometimes a brief discussion. When a problem is given matri- 
ces, vectors, or constants as inputs, it is assumed that they are given to precision of poly(n) bits. When 
a problem is given a unitary or quantum circuit, U x , it is assumed that the problem is actually given 
a classical description x of the corresponding quantum circuit, which consists of poly(|x|) elementary 
gates. Likewise, quantum channels are specified by efficient classical descriptions. 

This paper has attempted to be as self-contained as possible, but for a more complete description and 
motivation of a problem, the reader is invited to consult the references provided. An attempt has been 
made to include as many currently known QMA-complete and QMAi-complete problems as possible, 
but it is, of course, unlikely that this goal has been accomplished in full. The reader is invited to share 
other proven QMA-complete problems with the author for their inclusion in future versions of this work. 
Note that this paper has restricted itself to QMA-complete and QMAi-complete problems; it does not 
include other QMA-inspired classes, such as QMA(2) (when there are multiple unentangled Merlins) or 
QCMA (when the witness is classical). 

2 Quantum circuit /channel property verification 



V-l QUANTUM CIRCUIT-SAT (QCSAT) 

Problem: Given a quantum circuit V on n witness qubits and m = poly(n) ancilla qubits, 
determine whether: 

(yes case) 3 n-qubit state \4>) such that K(|V>)|0 . . . 0)) accepts with probability ^ b, i.e. out- 
puts a state with |1) on the first qubit with amplitude-squared ^ 6 

(no case) V n-qubit state V(\tp)\0 ... 0) accepts with probability ^ a, 
promised one of these to be the case, 

where b — a l/poly(n) and |0 . . . 0) is the all-zero m-qubit ancilla state. 



This problem is QMA-complete immediately from the definition of QMA. 



V-2 NON-IDENTITY CHECK 



Problem: Given unitary U implemented by a quantum circuit on n qubits, determine whether U 
is not close to a trivial unitary (the identity times a phase), i.e., 
determine whether: 

(yes case) V<?!> G [0, 2tt), \\U - e^ l\\ > b 

(no case) 3(f> G [0, 27r) such that || U - e i<A l|| < a, 
promised one of these to be the case, 
where b — a ^ l/poly(n). 



Theorem: QMA-complete [proven by Janzing, Wocjan, and Beth [13]] 

Theorem: QMA-complete even for small-depth quantum circuits [proven by Ji and Wu [14] ] 



Hardness reduction from: QCSAT (V-l I 
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V-3 NON-EQUIVALENCE CHECK 

This problem, a generalisation of non-identity check, is to determine whether two quantum 
circuits (do not) define approximately the same unitary (up to phase) on some chosen invariant 
subspace. The subspace could, of course, be chosen to be the entire space, but in many cases one is 
interested in restricting their attention to a subspace, e.g. one defined by a quantum error-correcting 
code. 



Problem: Given two unitaries, Ui and U2, implemented by a quantum circuit on n qubits, let V 
be a common invariant subspace of (C 2 )®" specified by a quantum circuit V (that ascertains with 
certainty whether a given input is in V or not). The problem is to determine, given Ui, U2, and V, 
whether the restrictions of Ui and U2 to V are not approximately equivalent, i.e., 
determine whether: 

(yes case) 3 G V such that V<^> G [0,2tt), UUiU% - e i4> 1) > b 

(no case) 3 <j> G [0, 2tt) such that V|V>) G V, II {UiU\ - e i0 1) \tj)} II a, 

promised one of these to be the case, 
where b — a f/poly(n). 



Theorem: QMA-complete [proven by Janzing, Wocjan, and Beth |13| ] 



Hardness reduction from: non-identity check ( V-2 1 



V-4 MIXED-STATE NON-IDENTITY CHECK 

In this problem, either the given circuit acts like some unitary U that is far from the identity, or 
else it acts like the identity. This is very similar to non-identity check, but allows for mixed-states. 
The diamond norm used here is defined in the glossary (appendix [A|. 



Problem: Given a quantum circuit C on n-qubit density matrices, 
determine whether: 

(yes case) ||C — 1 ||<> ^ 2 — e and there is an efficiently implementable unitary U and state \tl>) 
such that \\C(\il)){ip\)-U\il)){i)\ U*\\tr < e and \\U\ip)(tl>\ U^-\ip){i>\ \\ tr > 2-e 

(no case) ||C — 1 1|<> ^ e, 
promised one of these to be the case, 
where 1 > e 2- poly(n) . 



Theorem: QMA-complete [proven by Rosgen [29] ] 

Hardness reduction from: Quantum circuit testing (see appendb{B"| ( |X-f | 



V-5 NON-ISOMETRY TESTING 

Preliminary information: 

This problem tests to see if a quantum channel is not almost a linear isometry (given a mixed-state 
quantum circuit description of the channel). 

Definition 2.1 (isometry). A linear isometry is a linear map U : Hi — > H2 that preserves inner 
products, i.e. U'U = l-n 1 . 

Note that this is more general than a unitary operator, as "Hi and H2 may be different sizes and U 
need not be surjective. Practically speaking, isometries are the operations involving unitaries that 
have access to fixed ancillae (say, ancillae starting in the |0) state). This problem asks how far from 
an isometry the input is, so it requires a notion of approximate isometries. A characterising property 
of isometries is that they map pure states to pure states, even in the presence of a reference system; 
therefore, the notion of an approximate isometry is defined in terms of how mixed the output of a 
channel is in the presence of a reference system. 

Definition 2.2 (e-isometry). A quantum channel $ that is a linear transformation from Hi to 
H2 is an e-isometry ifV\tp) G Hi ®Hi, we have ||($ ® ^ 1 — e. i.e. it maps pure 
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states (in a combined input and reference system) to almost-pure states. The norm appearing in 
this definition is the operator nornyj 



Problem: Given a quantum channel <£> that takes density matrices of Hi to density matrices of H2, 
determine whether: 

(yes case) $ is not an e-isometry, i.e. 3 1 such that ||($ C8> 1-hi)(|V , )(V'|)I| ^ e 

(no case) $ is an e-isometry, i.e. V|^), |j($ <g> l'Hi)(|'^')(^>|)|| ^ 1 — e, 
promised one of these to be the case, 
where \ > e > 2" poly . 



Theorem: QMA-complete when < e < 1/19 [proven by Rosgen [28l [29] ] 



Hardness reduction from: QCSAT (V-ll 



V-6 DETECTING INSECURE QUANTUM ENCRYPTION 

In this problem, we wish to determine whether the given purported encryption channel E is insecure 
on a large subspace (for any key), or is close to being perfectly secure. The diamond norm used 
here is defined in the glossary (appendix |A|. 

Preliminary information: 

A private channel is a quantum channel with a classical key such that the input state cannot be 
determined from the output state without the key. Formally, it is defined as follows. 

Definition 2.3 (e-private channel). Suppose E is a channel taking as input an integer k £ 
{1, .... , K} and quantum state in space Hi, and producing a quantum output in space H2, with 
dimHi ^ dimH'2- Let Ek be the quantum channel where the integer input is fixed as k. Let Q. be 
the completely depolarizing channel that maps all density matrices to the maximally mixed state. E 
is an e-private channel if || -4 £\ &k — Q\\o ^ e ( s ° if the key k is not known, the output of E gives 
almost no information about the input) and there is a polysize decryption channel D (operating on 
the same space as E) such that Vfc, \\Dt ° Ek — 1 ||o ^ e (i.e. if k is known, the output can be 
reversed to obtain the input). 



Problem: Let 8 G (0, 1]. Given circuit E, which upon input k implements channel Ek acting from 
space Hi to "rii (with dirnHi ^ dirn?^), 
determine whether: 

(yes case) 3 subspace S, with dimS* (dim'Hi) 1- ' 5 , such that for any k and any reference 
space 1Z, if p is a density matrix on S ® 72. then \\(Ek <S> 1r)(p) — p\\tr ^ e 

(no case) E is an e-private channel, 
promised one of these to be the case, 
where 1 > e > 2" poly . 



Theorem: QMA-complete for < e < 1/8 [proven by Rosgen 29 ] 
Hardness reduction from: Quantum circuit testing (see appendbjB]) ( |X-1[ ) 

Notes: In this problem, channels are given as mixed-state circuits. 



V-7 QUANTUM CLIQUE 

This is the quantum analogue of the NP-complete problem largest independent set on a graph 
G, which asks for the size of the largest set of vertices in which no two vertices are adjacent. 
According to the analogy, the graph G becomes a channel, and two inputs are 'adjacent' if they 
can be confused after passing through the channel, i.e. if there is an output state that could have 
come from either of the two input states. In this quantum QMA-complete problem, the channel 
is a quantum entanglement-breaking channel $ and the problem is to find the size of the largest 
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set of input states that cannot be confused after passing through the channel, that is, to determine 
if there are k inputs p 1 , . . . , p k such that $(pi), . . . , &(pk) are (almost) orthogonal under the trace 
inner product. Regarding the name, note that the NP-complete problems largest independent 
set and largest clique (which asks for the largest set of vertices, all of which are adjacent) are 
essentially the same: a set of vertices is an independent set on a graph G if and only if it is a clique 
on the complement of G. 

Preliminary information: 

Let S be the SWAP gate, so S\ip) ® \<j>) = \tj>) ® \tp). Note that Tr(aKT 2 ) = Tr(Scn ® a 2 ) for all 
density matrices ai and a%, so the right hand side can be used to evaluate the trace inner product 
(and therefore determine orthogonality). For any density matrix p on k registers, let p l denote the 
result of tracing out all but the ith register of p. Similarly, define p !J = TV{i,...A!} x {j,j} (p). 

Definition 2.4 (entanglement-breaking channel; q-c channel). A quantum channel $ is entanglement- 
breaking if there are POVM (Hermitian, positive-semidefinite operators that sum to the identity) 
{Mi} and states ai such that $(x) = Yl- Tr(A/;x) a i- ^ n this case it is a fact that "!>® 2 (p 1 ' 2 ) is 
always a separable state. If the ai in the above definition can be chosen to be ai = where \i) 

are orthogonal states, then $ is called a quantum classical channel (q-c channel). 



Problem: Given an integer k and a quantum entanglement-breaking channel $ acting on n-qubit 
states, 

determine whether: 

(yes case) 3 pi ® • • • ® p k such that £V Tr(S$(pi) ® 3>(pj)) < a 

(no case) V fc-register state p, Tr(S'$® 2 (p i ' J )) > 6, 
promised one of these to be the case, 
where b and a are inverse-polynomially separated. 



There are two theorems associated with this problem. 

(a) Theorem: QMA-complete [proven by Beigi and Shor [3]] 

(b) Theorem: QMAi-complete when a = and $ is further restricted to q-c channels [proven by 
Beigi and Shor [3]] 



Hardness reduction from: fc-local Hamiltonian (H-l l 



Classical analogue: largest independent set is NP-complete. 



V-8 QUANTUM NON-EXPANDER 

A quantum expander is a superoperator that rapidly takes density matrices towards the maximally 
mixed state. The quantum non-expander problem is to check whether a given superoperator is 
not a good quantum expander. This problem uses the Frobenius nornj^] 

Preliminary information: 

A density matrix can always be written as p = / + A, where / is the maximally mixed state and A 
is traceless. A quantum expander is linear (and unital), so $(p) = I + &(A), which differs from I 
by &(A). Thus a good quantum expander rapidly kills of traceless matrices. We have the following 
formal definition. 

Definition 2.5 (quantum expander). Let $ be a superoperator acting on n-qubit density matrices 
and obeying $(p) = jj UdpU \ where {Ud : d = 1, . . . D} is a collection of D = poly(n) efficiently- 
implementable unitary operators. $ is a n-contractive quantum expander i/¥ 2° x 2 n traceless 
matrix A, ||$(A)|| F < k||A|| f . 

4 definition provided in the glossary (appcndixlAl 
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Problem: Given a superoperator $ that can be written in the form appearing in the above definition, 
determine whether: 

(yes case) $ is not a b-contractive quantum expander 
(no case) <£> is an a-contractive quantum expander, 
promised one of these to be the case, 
where b — a ^ l/poly(n). 

Theorem: QMA-complete [proven by Bookatz, Jordan, Liu, and Wocjan [5]] 



Hardness reduction from: QCSAT (V-ll 



3 Hamiltonian ground-state energy estimation 



H-l ifc-LOCAL HAMILTONIAN 

This is the problem of estimating the ground-state energjj^jof a Hamiltonian in which all interactions 
are fe-local, that is, they only ever involve at most k qubits at a time. Formally, H is a fc-local 
Hamiltonian if H — Hi where each Hi is a Hermitian operator acting (non-trivially) on at most 
k qubits. In addition to restricting the locality of a Hamiltonian in terms of the number of qubits 
on which it acts, one can also consider geometric restrictions on the Hamiltonian. Indeed, one can 
imagine a 2-local Hamiltonian in which interactions can only occur between neighbouring sites, e.g. 
H = where each Hi^+i acts non-trivially only on particles i and i + 1 arranged on a 

line. The results of these considerations will also be mentioned below. Note that all these problems 
use the operator norrrj^] 



Problem: Given a fc-local Hamiltonian on n qubits, H — 5^1= i Hi, where r = poly(n) and each Hi 
acts non-trivially on at most k qubits and has bounded operator norm ||-ffj|| ^ poly(n), 
determine whether: 

(yes case) H has an eigenvalue less than a 
(no case) all of the eigenvalues of H are larger than b, 
promised one of these to be the case, 
where b — a ^ l/poly(n). 

Theorem: QMA-complete for k ^ 2 [proven by Kempe, Kitaev, and Regev [19] ] 



Hardness reduction from: QCSAT (V-ll 



Additionally, it has been proved that it is: 

(a) Theorem: QMA-complete when k — O(logn) (still provided k ^ 2) [proven by Kitaev [20j ] 

(b) Theorem: QMA-complete even when k — 3 with constant norms, i.e. \\Hi\\ = 0(1) [proven by 
Nagaj [26]] 

(c) Theorem: QMA-complete even when 2-local on a line of 11-dimensional qudits, i.e. when the 
qudits are arranged on a line and only nearest-neighbour interactions are present [proven by 
NagaflHl]] 

(d) Theorem: QMA-complete even when 2-local on a 2-D lattice [proven by Oliveira and Terhal 

m 

(e) Theorem: QMA-complete even for interacting bosons under two-body interactions [proven by 
Wei, Mosca, and Nayak 33 ] 



5 see the glossary (appendix lAl for a very brief definition of these terms 

6 Based on initial work by Anaronov, Gottesman, Irani, and Kempe[l] who claimed this for 12-dimensional qudits 
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(f) Theorem: QMA-complete even for interacting fermions under two-body interactions [proven 
by Whitfield, Love, and Aspuru-Guzik [34] ] 



(g) Theorem: QMA-complete even when restricted to real 2-local Hamiltonians [proven by Bia- 
monte and Love [I]] 

(h) Theorem: QMA-complete even for stochasticQlamiltonians (i.e. symmetric Markov matrices) 
when fc ^ 3 [proven by Jordan, Gosset, and Love 1 15] ] 

Notes: For k = 1, the 1-local Hamiltonian is in P [19] . 

Many other simple modifications of fc-LOCAL Hamiltonian are also QMA-complete. For 
example, QMA-completeness is not changed when restricting to dense fc-local Hamiltonians, 
i.e. for a negative-semidefinite Hamiltonian when the ground energy is (in absolute value) 
«(n fc )Q 

Classical analogue: MAX-fc-SAT is NP-complete for k > 2. 

This problem may easily be rephrased in terms of satisfying constraints imposed by the Hi terms. 
The yes case corresponds to the existence of a state that violates, in expectation value, only fewer 
than a weighted-constraints; the no case, to all states violating, in expectation value, at least 6 
weighted-constraints. This problem can therefore be viewed as estimating the largest number of 
simultaneously satisfiable constraints, whence the analogy to MAX-SAT. 



H-2 



EXCITED fc-LOCAL HAMILTONIAN 

We have seen that estimating the ground-state energy of a Hamiltonian is QMA-complete. The 
current problem shows that estimating the low-lying excited energies of a Hamiltonian is QMA- 
complete; specifically, estimating the c th energy eigenvalue of a fc-local Hamiltonian is QMA- 
complete when c — 0(1). 



Problem: Given an integer c ^ 1 and a fc-local Hamiltonian H on n qubits, 
determine whether: 

(yes case) the c th eigenvalue of H is ^ a 
(no case) the c th eigenvalue of H is ^ b, 
promised one of these to be the case, 
where b — a l/poly(n). 



Theorem: QMA-complete for c = O(l) and fc ^ 3 [proven by Jordan, Gosset, and Love |15| ] 
Hardness reduction from: 2-local Hamiltonian (IH-1 ) 



H-3 



H-lh 



HIGHEST ENERGY OF A fc-LOCAL STOQUASTIC HAMILTONIAN 

states that finding the lowest eigenvalue of a stochasticr Hamiltonian is QMA- 
Since if H is a stochastic Hamiltonian then —H is stoquasticj we also have QMA- 
completeness for the problem of estimating the largest energy of a stoquastic Hamiltonian. 



Problem 
complete 



Problem: Given a fc-local stoquastic Hamiltonian H on n qubits, 
determine whether: 

(yes case) H has an eigenvalue greater than b 
(no case) all of the eigenvalues of H are less than a, 
promised one of these to be the case, 
where b — a ^ l/poly(n). 



7 definition provided in the glossary (appcndixlAl 

8 [12] actually defined their problem for finding the highest energy of a positive-semidefinite Hamiltonian. Their interest lay 
in finding approximation algorithms for this problem. 
9 dcfinition provided in the glossary (appendixlAl 
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Theorem: QMA-complete for k 3 [proven by Jordan, Gosset, and Love |15) ] 

Hardness reduction from: fc-LOCAL STOCHASTIC Hamiltonian (H-lhl which itself is from (H-5a| 

Notes: fc-LOCAL stoquastic Hamiltonian, i.e. finding the lowest energy rather than the highest 
energy, is in AM. [7] 



H-4 SEPARABLE fc-LOCAL HAMILTONIAN 

This problem is the fc-LOCAL Hamiltonian problem with the extra restriction that the quantum 
state of interest be a separable state, i.e. the question is whether there is a separable state with 
energy less than a (or greater than b). The state may still be entangled - the separability need only 
be with respect to a given partition of the space into two sets. 



Problem: Given the same input as described in the fc-LOCAL Hamiltonian problem, as well as a 
partition of the qubits to disjoint sets A and B, 
determine whether: 

(yes case) 3 = A ® \4>) B , with \rp) A £ A and \ip) B € B, such that {i/)\H\ip) < a 
(no case) V \tp) = \ip) A ® \ip) B , with \ip) A e A and \ip) B € B, (ip\H\ip) > b, 
promised one of these to be the case, 
where b — a ^ l/poly(n). 



Theorem: QMA-complete [proven by Chailloux and Sattath [5]] 



Hardness reduction from: fc-LOCAL Hamiltonian (H-f i 



Notes: Interestingly, although the QMA-hardness proof follows immediately from fc-LOCAL Hamil- 
tonian, the "in QMA" proof is non-trivial and relies on the LOCAL CONSISTENCY problem 



H-5 PHYSICALLY RELEVANT HAMILTONIANS 

2-LOCAL Hamiltonian is also QMA-complete when the Hamiltonian is restricted to various physically- 
relevant forms. These Hamiltonians may serve as good models for phenomena found in nature, or 
may be relatively easy to physically implement. 

We will not explain all of the relevant physics and quantum chemistry here. However, we use the 
following notations: 

The Pauli matrices X, Y, and Z are denoted as 

a x = X, a v — Y, <t z = Z, cr — (a x ,a y , <r z ). 

When particles are on a lattice, denotes nearest neighbours on the lattice. An electron on 

a lattice is located at some lattice site i and can be either spin-up (t) or spin-down (4-). The 
operators a] s and di lS are the fermionic raising and lowering operators, respectively; they create 
and annihilate an electron of spin s G {1\4-} a ^ site h respectively. The operator corresponding to 
the number of electrons of spin s at site i is nj, s = a is a^ s - 

Note that proving the QMA-completeness of physical Hamiltonians is important towards the goal 
of implementing adiabatic quantum computation: any QMA-complete Hamiltonian can be used to 
realise universal adiabatic quantum computation [3]. 

(a) The 2-local Hamiltonian 

Hzzxx = /J hi<Ti + dicr* + Jija^aj + KijO-iCFj 

i i i,j i,j 

where coefficients di,hi, Kij , Jij are real numbers. This represents a 2-local Ising model with 
1-local transverse field and a tunable 2-local transverse a x a x coupling. The a x a x is realisable, 
e.g., using capacitive coupling of flux qubits or with polar molecules. [3]. 
Theorem: QMA-complete [proven by Biamonte and Love [4]] 



Hardness reduction from: 2-local real Hamiltonian (H-lgi 
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Classical analogue: When when Kij — di = we obtain the famous Ising (spin glass) model 
with a magnetic field, which is NP-complete on a planar graph [2j. 

(b) The 2-local Hamiltonian 

H Z x = ^2 K^t + 22 di<rf + ^ Jijof <xj + ^ /\ . /> / n . 

i i i<j i<j 

where coefficients di, hi, Kij, Jij are real numbers. The a x a z is realisable using flux qubits [3]. 
Theorem: QMA-complete [proven by Biamonte and Love [4]] 
Hardness reduction from: 2-local real Hamiltonian (|H-lg[| 



(c) The 2D Heisenberg Hamiltonian with local magnetic fields 

The 2D Heisenberg Hamiltonian is a model for spins on a 2-dimensional lattice in a magnetic 
system, and is often used to study phase transitions. It takes the form 

Hneia = J ^2 °"i ' °J ~ ^2 (Ti ' 

Here, sums over i range over all sites i in the lattice, and range over nearest-neighbouring 
sites. The local magnetic field at site i is denoted by Bi, and the coupling-constant J is a 
real constant. Hamiltonians restricted to this form are QMA-complete both for J > and for 
J < 0. 

Theorem: QMA-complete [proven by Schuch and Verstraete |30| ] 



Hardness reduction from: 2-local 2D-lattice Hamiltonian (H-ldl 



(d) The 2D Hubbard Hamiltonian with local magnetic fields 

The 2D Hubbard model describes a system of fermions on a 2-dimensional lattice and is 
therefore used to model electrons in solid-state systems. It takes the form 

i^Hubb = — t ^2 a l,s a 3,s + U ^2 n i,r n i,i — ^2 ' Bi ■ 

(i,j),B i i 

Here, sums over i range over all sites i in the lattice, {%,]) range over nearest-neighbouring 
sites, and s range over spins {t, !}• In this model, <Ti is the Pauli matrices vector converted 
into orbital pair operators: <7i = {of , aj, } with <rf = ^ s , &" s ia\ s a>i, s ' where a" s , denotes 
the (s, s') element of Pauli matrix a a . The local magnetic field at site i is denoted by Bi, and t 
and U are positive numbers representing the electron-electron Coulomb repulsion and electron 
tunneling rate, respectively. 

Theorem: QMA-complete [proven by Schuch and Verstraete |30| ] 



Hardness reduction from: Heisenberg Hamiltonian (H-5cl 



H-6 TRANSLATIONALLY INVARIANT fc-LOCAL HAMILTONIAN 



There has been some interest in studying the fc-LOCAL Hamiltonian (H-li problem with the 
added restriction that the Hamiltonian be translationally invariant, i.e. that the Hamiltonian be 
identical at each particle (qudi1p°| in the system. Such systems are generally in a one-dimensional 
geometry with periodic boundary conditions. Some problems additionally employ geometric locality 
(which we refer to here as being on a line), such as constraining interactions to be between nearest- 
neighbouring particles, or between nearby (but not necessarily nearest-neighbouring) particles; some 
problems do not, however, have such geometric locality constraints. Current results are listed here. 
These results are all built on Ref. [T|. Finally, note that there may be complications in discussing 
QMA-completeness, since if a Hamiltonian is local and translationally invariant, the only input 
that scales is the number of qudits, n; it may need to be assumed that n is given to the problem in 
unary to avoid these complications, but we will not discuss this here. 



'definition provided in the glossary (appendixlAl 
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The fc-LOCAL Hamiltonian problem is: 

(a) Theorem: QMA-complete even with a translationally invariant 3-local Hamiltonian with 22- 
state qudits, but where the interactions are not necessarily geometrically local, [proven by 
Vollbrecht and Cirac |31| ] 

(b) Theorem: QMA-complete even for translationally invariant 2-local Hamiltonians on poly(n)- 
state qudits [proven by Kay [161 ] 

(c) Theorem: QMA-complete even for translationally invariant 0(log n)-local Hamiltonians on 
7-state qudits, where the interactions are geometrically local (albeit not restricted to nearest- 
neighbours) [proven by Kay [16]] 

(d) Theorem: QMA-complete even for 2-local Hamiltonians on a line of 49-state qudits where all 
strictly-2-local Hamiltonian terms are translationally invariant, although the 1-local terms can 
still be position-dependent [proven by Kay [17] ] 

Notes: Although not discussed here, similar results exist for rotationally invariant Hamiltoni- 
ans [18] . 



7 UNIVERSAL FUNCTIONAL OF DFT 

Preliminary information: 

In quantum chemistry, density functional theory (DFT) is a method for approximating the ground- 
state energy of an electron system (see |30| and the references therein). The Hamiltonian for a 
system of N electrons is H = T e + V ee + V e where the kinetic energy, electron-electron Coulomb 
potential, and local potential are given respectively by 



1 N 

= - Ev? 



2 

i=l 



N 



N 



where 7 > 0, ri is the position of the ith electron, and xi = (r^, Si) is the position (r^) of the ith 
electron together with its spin (s;). 

The ground-state energy of a system of N electrons can be found by minimizing the energy over 
all iV-electron densities p^ N \x), but it can also be given by minimizing over all single-electron 
probability distributions n(x) as 

E = min (Tr[V e n(x)} + F[n(x)]J 

where the universal functional of DFT is 

F[n(x)]= min Tr[(T e + V ee )p (N) (x)} . 

In the universal functional, the minimization is over all A^-electron densities ' (sc) that give rise 
to the reduced-density n(x); therefore F[n] gives the lowest energy of T e + V ee consistent with n. 
The difficult part of DFT is approximating F[n(x)], which is independent of the external potential 
V e and is therefore universal for all systems. 
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Problem: Given an integer N, representing the number of electrons, and a one-electron probability 
density n(x), 
determine whether: 

(yes case) F[n(x)] ^ b 
(no case) F[n(x)] ^ a, 
promised one of these to be the case, 

where b — a ^ l/poly(iV) and the strength of the Hamiltonian is bounded by poly(iV). 



Theorem: QMA-complete [proven by Schuch and Verstraete [301 134] ] 



Hardness reduction from: Hubbard model (H-5dl 



3.1 Quantum A>SAT and its variations 

Quantum fc-SAT is really just the fc-LOCAL Hamiltonian problem restricted to projection operators. 
Nonetheless, it is included here as a subsection of its own due to its high level of interest and study. 
Note that occasionally people speak of the problem MAX-QUANTUM-fc-SAT; this is just another name 
for the fc-LOCAL Hamiltonian problem ( |H-1| ), and is therefore QMA-complete for fc > 2. The problem 
Quantum fc-SAT, however, is different. 



S-l 



QUANTUM fc-SAT 

Quantum fc-SAT is the quantum analogue of the classical problem fc-SAT. It is actually simply 
the fc-LOCAL Hamiltonian problem restricted to the case of fc-local projector Hamiltonian^] In 
classical fc-SAT, the objective is to determine whether there exists a bit string (so each character 
in the string can be either or 1) that satisfies (all of) a set of boolean clauses, each of which only 
involves at most fc bits of the string. In the quantum analogue, rather than boolean clauses we have 
projection operators. A quantum fc-SAT instance has a solution if there is a quantum state that 
passes (i.e., is a 0-eigenvalue of) each projection operator. 

We provide two equivalent definitions of this problem here. The first emphasises quantum fc-SAT 
as a special case of fc-LOCAL Hamiltonian, and the second emphasises the similarity to classical 
fc-SAT. 



Problem: Given fc-local projection operators {Hi, 
letting H = Yl7=i Hi, 
determine whether: 

(yes case) H has an eigenvalue of precisely 
(no case) all of the eigenvalues of H are larger than b 
promised one of these to be the case, 
where b l/poly(n). 



n m } on n qubits, where m = poly(n), and 



Equivalently, we can define the problem as follows. 



Problem: Given polynomially many fc-local projection operators {H;}, 
determine whether: 

(yes case) 3 \%p) such that Hi|^) = Vi 

(no case) V \'4>),^2 i {tp\U.i\^}) ^ e (i.e. the expected number of 'clause violations' is ^ e), 
promised one of these to be the case, 
where e l/poly(n). 

Theorem: QMAi-complete for fc ^ 4 [proven by Bravyi [B]] 
Hardness reduction from: QCSAT (IV- 11) 



Notes: Quantum fc-SAT is in P for fc = 2. The case of fc = 3 is still an open problem, but is 
known to be NP-hard. 

Quantum fc-SAT is still QMAi-complete if instead of demanding that Hi be projectors, 
we demand they be positive-semidefinite operators with zero ground-state energies and 
constant norms 1261. 



1 1 definition provided in the glossary (appendix Ia| 
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Classical analogue: fc-SAT is NP-complete for fc ^ 3. 



QUANTUM (di,d 2 ,...,dfc)-SAT 

Quantum (d\,d,2, . . . , dfc)-SAT is a quantum fc-SAT problem but in which the ith qubit is replaced 
by a di-dimensional qudit, i.e. instead of the ith register containing a qubit (i.e. a 2-dimensional 
state), it contains a (^-dimensional (qudit) state. For purposes of notation, we assume that d\ ^ 
d,2 > . . . > dfe. 

For fc ^ 4, this class is trivial: since quantum 4-SAT is QMAi-complete for qubits, it is certainly 
QMAi -complete for qudits. The cases of k — 2 or 3 are not fully understood; however, the following 
results are known. 

(a) quantum (5,3)-SAT, i.e. with a cinquit and a qutrit 

Theorem: QMAi-complete for k = 2 with di ^ 5, d,2 ^ 3 [proven by Eldar and Regev |10] ] 

(b) quantum (3,2,2)-SAT, i.e. with a qutrit and two qubits 

Theorem: QMAi-complete for k — 3 with di ^ 3, and d2,d$ ^ 2 [proven by Nagaj and Mozes 
126]] 

(c) QUANTUM (11,11)-SAT ON A (ONE-DIMENSIONAL) LINE 

Theorem: QMAi-complete [proven by Nagaj 25 ] 

Notes: quantum (2,2)-SAT, i.e. quantum 2-SAT, is in P. 

quantum (di,d2)-SAT when d\ < 5 or d2 = 2 are open questions. They are known to be 

NP-hard (except for di = d2 — 2 which is in P).|10] 

QUANTUM (2,2,2)-SAT, i.e. quantum 3-SAT, is in an open question. 

Classical analogue: even though classical 2-SAT is in P, classical (3,2)-SAT, where one of the binary 
variables is replaced by a ternary variable, is NP-complete|10] . 



STOCHASTIC fc-SAT 

This problem is like quantum fc-SAT, except that instead of projection operators it uses stochastic, 
Hermitian, positive-semidefinite, operators (see glossary, appendix [A] for definitions). 

Problem: Given set of fc-local stochastic, Hermitian, positive-semidefinite, operators {Hi, . . . ,H m } 
on n-qubits with norms bounded by poly(n), 
determine whether: 

(yes case) the lowest eigenvalue of H = £\ Hi is 
(no case) all eigenvalues of H are b, 
promised one of these to be the case, 
where b ^ l/poly(n). 



Theorem: QMAi-complete for k — 6 [proven by Jordan, Cosset, and Love |15] ] 



Hardness reduction from: quantum 4-SAT iS-ll 



Notes: Stoquastic quantum fc-SAT, where the word 'stochastic' is replaced by 'stoquastic' above, 
is in MA and is MA-complete for k > 6. [8 Note that STOCHASTIC fc-SAT makes no 
mention of projection operators, and therefore isn't really a quantum fc-SAT problem. In 
Stoquastic quantum fc-SAT, its MA-complete cousin, however, the operators can be 
converted to equivalent operators that are projectors, whence the relation to quantum 
fc-SAT. No connection to projectors is known in the stochastic case. 
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4 Density matrix consistency 



C-l fc-LOCAL DENSITY MATRIX CONSISTENCY 

Given a set of density matrices on subsystems of a constant number of qubits, this problem is to 
determine whether there is a global density matrix on the entire space that is consistent with the 
subsystem density matrices. 



Problem: Consider a system of n qubits. Given vn — poly (71) /j-local density matrices p% } . . . , p m) 
so that each pi acts only on a subset d C {1, . . . n} of qubits with \d\ ^ k, 
determine whether: 

(yes case) 3 n-qubit density matrix a such that Vi, if bi = Tr^ t .., jn \^c i then \\pi — bi\\tr = 
(no case) V n-qubit density matrix a, 3i such that if bi = Ttn^.^x^Q (<x), then \\pi— bi\\tr b, 
promised one of these to be the case, 
where b ^ l/poly(n). 



Theorem: QMA-complete even for k = 2 [proven by Liu 



Hardness reduction from: fc-LOCAL Hamiltonian (H-li. [Turing reduction] 



Classical analogue: CONSISTENCY OF marginal distributions is NP-hard. 



C-2 iV-REPRESENTABILITY 



This is the same problem as 2-LOCAL density matrix consistency ( C-l I , but specialised to 



fermions (particles whose quantum state must be antisymmetric under interchange of particles). 



Problem: Given a system of N fermions and d possible modes, with N ^ d ^ poly(iV), and a 
d(d-i) x d(d~i) 2 _fermion density matrix p, 
determine whether: 

(yes case) 3 („) x (^) JV-fermion density matrix a such that Tr^ 3 . jv}(°") — P 
(no case) V Af-fermion density matrices a, \\p — Tr{ 3 ,,jv} (°") ||tr J? b, 
promised one of these to be the case, 
where b ^ l/poly(iV). 

Theorem: QMA-complete [proven by Liu, Christandl, and Verstraete [23] ] 



Hardness reduction from: 2-local Hamiltonian (H-ll [Turing reduction] 



C-3 BOSONIC iV-REPRESENTABILITY 



This is the same problem as 2-LOCAL density matrix consistency (C-l I, but specialised to 



bosons (particles whose quantum state must be symmetric under interchange of particles). 

Problem: Given a system of iV bosons and d possible modes, with d ^ cN (for some constant 
c> 0), and a d(d + 1) x d(d + 1) 2-boson density matrix p, 
determine whether: 

(yes case) 3 ( iV4 ^ _1 ) x ( JV4 jv _1 ) ^-b° sori density matrix a such that Tr^...^} (°") = P 
(no case) V iV-boson density matrices a, \\p — Tr/ 3 ... > jv}( cr )||tr b, 
promised one of these to be the case, 
where b ^ l/poly(iV). 



Theorem: QMA-complete [proven by Wei, Mosca, and Nayak |33] 



Hardness reduction from: 2-local Hamiltonian (H-ll [Turing reduction] 
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A Glossary 



The definitions given here are not necessarily the most general or precise possible, but they suffice for 
the needs of this paper. 

i th energy of a Hamiltonian H - the i th eigenvalue of H . 

ground-state energy of a Hamiltonian H - the smallest eigenvalue of H. 

Hamiltonian - the generator of time-evolution in a quantum system. Its eigenvalues correspond to the 
allowable energies of the system. It also dictates what interactions are present in a system. As a 
matrix, it is Hermitian. 

Hermitian matrix - a square matrix H that is equal to its own conjugate-transpose, i.e. — H. 

norms of matrices - Several different matrix norms appear in this paper. Given a matrix A with 
elements a»j, the 

operator norm of A is || A|| = max {|| A ||2 : || H2 = 1}- For a square matrix, it is also known 
as the spectral norm; it is the largest singular value of A, and if A is normal, then it is the 
largest absolute value of the eigenvalues of A. 

Frobenius norm of A is \\A\\ F = y / Trpt]4J = \J^~\a^- 

trace norm of A is ||A|| tr = Tr[VZi\A] , which when A is normal is the sum of the absolute value 

of its eigenvalues. It is often written ||A||t r = Tr|A| where \A\ denotes V At A 

norms of quantum superoperators - Occasionally norms of superoperators are required in this pa- 
per. 

diamond norm of a superoperator $ that acts on density matrices that act on a Hilbert space H 
is ||$||o = sup x || ($ ® l)(X)||t r /|]X|| tr where the supremum is taken over all linear operators 
X:U®H^H®n. 

positive-semidefinite matrix - a Hermitian matrix whose eigenvalues are all non-negative. 

fc-local projector on n qubits - a Hermitian matrix of the form n = (gj £\ \^p){ip\ i where the 

\4>)i are orthonormal fc-qubit states. It satisfies n 2 = n. 

stochastic matrix - a square matrix of non-negative real numbers such that each row sums to 1. If 
additionally each column sums to 1, it is called a doubly stochastic matrix. 

stoquastic Hamiltonian - a Hamiltonian in which the off-diagonal matrix elements are non-positive 
real numbers in the standard basis. 

qudit - generalization of a qubit: for some d, a d-state quantum-mechanical system, or mathematically, 
a unit-normalized vector in (C d ) (but where global phase is irrelevant). When d = 2 it is called a 
qubit, when d = 3 it is called a qutrit. When d = 5 it may be called a cinquit[TO]. but to avoid 
headaches, I advise against trying to name the d = 4 version. 



B QMA-hard theorems 



This appendix contains a theorem that allows one to prove that several quantum circuit verification 
problems are QMA-hard. Note that it doesn't prove QMA-completeness, only QMA-hardness, so it is 
relegated to the appendix. 



X-l QUANTUM CIRCUIT TESTING 

This problem involves testing the behaviour of a quantum circuit. Given input circuit C, one wishes 
to determine whether it acts like a circuit from uniform circuit family % on a large input space, 
or like a circuit from uniform circuit family ^1 for all inputs, promised that the two families are 
significantly different. 
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Problem: Let S £ (0, 1] and let and be two uniform families of quantum circuits. Given 
input quantum circuit C acting on n-qubit input space H, let Co £ % and Cl £ act on the same 
input space H. The problem is, 
determine whether: 

(yes case) 3 subspace S, with dimS* ^ (dim'H) 1- ' 5 , such that for any reference space 1Z, if p is 
a density matrix on SgK then ||(C ® — (Co CS> 1-R.)(p)||t r ^ £ 

(no case) for any reference space 7£, if p is a density matrix on the full space H <g> 1Z then 
||(C® l w )(p) - (d ®l K )(p)|| tr ^ e, 
promised one of these to be the case, 

where 1 > e 2~ poly ^"\ Note that the promise actually imposes a condition on the allowable % 
and "Wi, forcing them to be significantly different. 



Theorem: QMA-hard for constant S [proven by Rosgen [^] ] 
Hardness reduction from: QCSAT ( |V-1[ ) 

Notes: leads to: mixed-state non-identity check ( V-4[ ) , non-isometry testing ( |V-5[ ), De- 



tecting INSECURE QUANTUM ENCRYPTION) V-6 I 



C Diagram of QMA-complete problems 





QCSAT 




■«. 

Channel Property Verification 

• non-identity check 

• non-equivalence check 

• quantum clique 

• non-isometry test 

• detect insecure q. encryption 

• quantum non-expander test 




/f-LOCAL Hamiltonian [2 < k < 0(log n)] 

• constant strength Hamiltonians* 

• line with 11-state qudits 

• 2-local on 2-D lattice 

• interacting bosons, fermions 

• real Hamiltonians 

• stochastic Hamiltonians* 

• physically-relevant Hamiltonians 

• translationally-invariant Ham. 

• excited 0(l) th energy level* 

• highest energy of stoquastic Ham.* 

• separable /(-local Hamiltonian 

• universal functional of DFT 






/C-LOCAL CONSISTENCY [k > 2] 




• bosonic, fermionic 




QUANTUM-/r-SAT [k > 4] 

• quantum-(5,3)-sat 

• quantum-(3,2,2)-SAT 

• stochastic-6-sat 







for k > 3 



Figure 1: Schematic showing the QMA-complete problems listed in this paper, according to their categories. 
Lines show hardness reductions. 
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